Automated weekly dependency check flagged something to review:
- npm audit vulnerabilities (prod + dev): 4
- Pinned SheetJS: 0.20.3
- Newer SheetJS on cdn.sheetjs.com: none
If a newer SheetJS exists, bump the tarball URL in package.json per ADR-0036
(do NOT reinstall from npm), then run npm install + npm run xlsx-acceptance and open a PR.
If audit is non-zero, review the advisory and bump/replace accordingly.
Opened by .github/workflows/dep-freshness.yml.
Automated weekly dependency check flagged something to review:
If a newer SheetJS exists, bump the tarball URL in
package.jsonper ADR-0036(do NOT reinstall from npm), then run
npm install+npm run xlsx-acceptanceand open a PR.If audit is non-zero, review the advisory and bump/replace accordingly.
Opened by
.github/workflows/dep-freshness.yml.